Strumfy/ Docs
EN

Privacy Policy

Updated date: 2026-10-08

Welcome to Strumfy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our chord sharing service (website, mobile app shells / WebViews, and related services).

Table of Contents

Introduction

Strumfy is a community-driven platform for sharing, discovering, and learning song chords and related music views such as tabs and sargam. This policy applies to our website, iOS/Android app experiences (including WebView shells), and related services (collectively, the "Service").

If you do not agree with this policy, please do not use the Service.

Where required by law (for example in the EEA/UK), some processing described below (especially advertising and analytics cookies) only happens after you give consent, or we offer an equivalent choice such as a paid ad-free plan.

Information We Collect

We collect information that you provide directly, information generated through your use of the Service, and information from third parties when you choose to connect accounts or make purchases.

Account Information

When you create an account or sign in, we may collect:

  • Email address — account identification, communication, and recovery
  • Social profile identifiers — when you sign in with Google, Apple, or Facebook, we may receive a provider-specific user ID
  • Display name, bio, and profile picture — optional; not required to be your legal name or likeness

Payment Information

Strumfy offers optional paid (Pro) features. Payment processing is handled by third-party providers (for example PayPal, Stripe, or Apple/Google in-app purchases). We do not store full payment card numbers on our servers.

We may receive and store:

  • Payment-related emails or customer/subscription IDs
  • Purchase and subscription status needed to unlock Pro features

Payment providers process payment data under their own privacy policies.

Usage and Technical Information

When you use the Service, we may collect:

  • IP address (including via our CDN / security provider)
  • Device and browser information (user agent, approximate device type, OS)
  • App or frontend version (for compatibility and debugging)
  • Log and diagnostics data (for example pages or screens used, errors, performance signals)

Content You Provide

You may submit chord sheets, tabs/sargam metadata, comments, corrections, ratings, favorites/playlists, reports, and other community content. Content may be linked to your account according to your settings and our Terms of Service.

Song content you submit stays yours. You can edit, make private, or delete it at any time, and we may remove it under our Terms of Service (for example after a valid report or rights-holder claim). Once removed, it is no longer shown on Strumfy — including to Pro subscribers — although copies may remain briefly in backups and caches as described in Data Retention.

Error and Crash Reports

To keep the Service reliable, our apps and website may send limited diagnostic reports when something fails (for example error message, truncated stack trace, page URL, app/frontend version, and browser user agent). We store these in application logs. We hash or minimize IP addresses where practical. These reports are used for security and debugging, not for advertising.

Cookies and Similar Technologies

We use cookies, local storage, and similar technologies.

Strictly necessary / functional

These are needed to run the Service (for example):

  • Authentication / session — keeping you signed in (including HTTP-only refresh tokens and related flags)
  • Preferences — such as language or theme where stored locally
  • Security and delivery — cookies or signals set by our CDN / WAF (for example Cloudflare) to protect and route traffic

These do not require advertising consent, but we still disclose them here.

Analytics

We use Google Analytics 4 to understand aggregate usage (page views, product events such as play, search, upgrade funnels). GA may set cookies or use similar identifiers.

Advertising

  • Website / WebView: free users may see ads via Google AdSense
  • Native mobile ads (when enabled): free users may see ads via Google AdMob

These partners may use cookies, advertising IDs, or similar technologies to deliver, measure, and (where allowed) personalize ads.

What we do not treat as advertising cookies

First-party login cookies, security cookies, and our own error-logging beacons are not used to personalize third-party ads.

How We Use Your Information

We use information to:

  • Provide, maintain, and improve the Service
  • Create and manage accounts and authenticate sign-in
  • Process purchases and manage Pro / paid access
  • Display advertising in the free tier (where permitted)
  • Measure and improve features (analytics, where permitted)
  • Diagnose errors and prevent abuse or security incidents
  • Communicate about account, security, or support matters
  • Comply with legal obligations

How We Share Your Information

We do not sell your personal information. We may share information with:

Service Providers and Partners

  • Hosting, CDN, and security (for example Cloudflare)
  • Authentication providers (Google, Apple, Facebook)
  • Payment processors (PayPal, Stripe, Apple, Google, as applicable)
  • Google for Analytics (GA4), AdSense, and/or AdMob
  • Tools needed for support or operations

These parties process data under their own terms and policies when they act as independent controllers (especially Google ads/analytics), or as processors when they only host our Service.

Legal, Safety, and Business Transfers

We may disclose information when required by law, to protect rights and safety, to enforce our Terms, or as part of a merger/acquisition. We may share information when you direct us to do so.

Advertising, Analytics, and Paid Features

Strumfy uses a freemium model:

  • Free tier — may include third-party ads (AdSense on web/WebView; AdMob when used in native apps)
  • Pro / paid — ad-free (or ad-reduced) experience and premium platform features (such as offline mode and tabs/sargam views) as described in the product. Pro does not give you ownership of, or permanent access to, songs submitted by other users.

Ad and analytics partners are governed by Google’s policies as well as this policy. Where the law requires consent for non-essential cookies or ads, we will ask before enabling those technologies for you.

You can also limit some tracking through browser settings, OS ad preferences (for example “Limit Ad Tracking” / App Tracking Transparency where applicable), and Google’s ad settings.

Depending on your region and platform:

  • EEA/UK (and similar) — web / WebView: Google AdSense (and related Google tags) may show Google’s certified consent / privacy messaging before personalized ads. You can change your mind later via Cookie settings in the site footer or menu (opens Google’s consent revocation / privacy message).
  • Native AdMob: where AdMob is used, Google’s User Messaging Platform (UMP) or another Google-certified consent flow may be required for ads in regulated regions.
  • Analytics (GA): where required, measurement follows Google’s consent / tag configuration alongside advertising consent.

Choosing not to consent to advertising/analytics cookies may mean personalized ads and measurement do not run for you. We may still offer the Service via Pro (paid, ad-free) or limited functionality, depending on product design and applicable law.

Consent must be freely given. We will not pretend you consented if you did not.

Data Retention

We retain personal information as long as needed to provide the Service, fulfill the purposes in this policy, comply with law, resolve disputes, and enforce agreements.

Error logs are kept for a limited operational period. When data is no longer needed, we delete or anonymize it where reasonable. Backups may lag for a short time.

Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or restrict certain processing, and to withdraw consent where processing is consent-based.

Account and Data Deletion

You may request deletion of your account and associated personal data. See our Data Deletion Guide.

We process valid requests under applicable law. Some data may be retained when required for legal, security, or operational reasons.

Data Security

We use reasonable administrative, technical, and organizational measures to protect information. No method of transmission or storage is 100% secure.

Children's Privacy

The Service is not directed to children under 13 (or the higher minimum age in your jurisdiction). We do not knowingly collect personal information from children. Contact us if you believe we have, and we will take appropriate steps.

International Users

Our servers and providers may process data in countries other than your own. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for cross-border transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the Updated date at the top. For material changes, we may provide additional notice in the Service. Continued use after changes become effective means you accept the updated policy, except where consent is required by law for a new purpose.

Contact Us

Questions or privacy requests:

We will respond within a reasonable timeframe.